Removing Win32: Malware-gen ??

[amzolt]

I began this in a different thread but was advised to start my own...

This morning my free Avast program found a threat:
File name: *PROCESS\7e8\explorer.exe\1000000\ff000\explorer.exe
Threat name: Win32: Malware-gen
Then the message: Error: Access is denied (5)

I had preselected to have threats deleted. And, Avast couldn't transfer the threat to the Virus Chest.

I called Avast's helpline and they informed me that I would have to have a tech manually remove it and that a boot scan would not help. I also called a local computer shop and they said the same thing.

The previous thread recommended Malwarebytes' Antimalware so I downloaded it and ran the quick scan, as recommended. (See FIRST-mbam-log-2010-08-07 (13-08-11) attached).

I posted that log in the previous thread and someone said I should run a bootscan (see aswBoot attached) and then update and re-run Malwarebytes' Antimalware (see SECOND-mbam-log-2010-08-07 (17-39-03) attached).

I can't tell if Win32: Malware-gen has been removed or not..........

Help??

[DavidR]

See this topic, http://forum.avast.com/index.php?topic=62598.0 this is a memory block loaded by explorer (you ran a scan which included memory) that was a false positive detection which has been corrected.

The latest virus definitions update 100807-1 resolves this false positive on the memory block loaded by explorer.exe.

[amzolt]

See this topic, http://forum.avast.com/index.php?topic=62598.0 this is a memory block loaded by explorer (you ran a scan which included memory) that was a false positive detection which has been corrected.

The latest virus definitions update 100807-1 resolves this false positive on the memory block loaded by explorer.exe.

Thanks for the speedy and comforting reply :-)

[modati]

David rules! 

[DavidR]

See this topic, http://forum.avast.com/index.php?topic=62598.0 this is a memory block loaded by explorer (you ran a scan which included memory) that was a false positive detection which has been corrected.

The latest virus definitions update 100807-1 resolves this false positive on the memory block loaded by explorer.exe.

Thanks for the speedy and comforting reply :-)

You're welcome.